Windows

General discussion

different password policies for users

Hi I wish to setup two different password policies on our domain. One group of users will have a minimum number of characters of 10 and will have strong password enforced while another group will have a minimum number of characters of 4 and no strong passwords enforced. How do I do this. Our domain is a Windows 2003 one. Thanks

First of all, keep in mind that group policies that are applied will apply themselves in the most restricted manner, unless you disable policy propogation from above. The easiest thing to do may be to leave the default domain policy as it was defaulted with very little set. You don't necessarily have to put the users in different OUs because even if "10 character strong" users get the "4 character not strong" GPO, as long as the "10 character strong" policy is being applied to them, that's what they will use because it's the most restrictive. However, keeping in different containers with the GPOs separated may be easier to manage and keep track of.

Now, this should be a simple thing, but I will go ahead and ask anyway. When you set the GPOs for each type of user, did you go into the security tab for the Group Policy and make sure the users show up in the security window and that the Apply Policy check box is checked. The best thing to do is add the users to a corresponding group, add that group to the security tab of the GPO and then make sure Apply Policy is checked. Otherwise, you will get the default domain policy. So you may want to create a group that's called "Strong Security Group", add all the "10 character strong" users to it, then put it in the corresponding GPO in the security tab and check the Apply Policy check box on that group name. Hopefully this helps. Sorry for the novel.

I have done the following. I have created a group called passwords and added the users to this group. I have created a new group plolicy object with the appropiate password policies and added this to an OU which contains the password group. I have added this group to the security tab of the group policy and ticked apply policy. I have ticked the no override option.It still does not work. Is there anything else Im missing out on?

Start or search

Create a new discussion

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Post type

Subject title

Topic Tags

Select up to 3 tags (1 tag required)

Cloud

Piracy

Security

Apple

Microsoft

IT Employment

Google

Open Source

Mobility

Social Enterprise

Community

Smartphones

Operating Systems

Windows

Mac

Malware

Tablets

Networking

Browser

Hardware

Software

Web Developerment

Linux

Off Topic

Message Body

Track this discussion and email me when there are updates

Please note: Do not post advertisements, offensive material, profanity, or personal attacks. Please remember to be considerate of other members. If you're new to the TechRepublic Forums, please read our TechRepublic Forums FAQ. All submitted content is subject to our Terms Of Use.